The Design And Implementation Of Network Disk Security System

In the21st century, with the rapid increase of domestic information degree, theamount of information network load more and more information through the form ofdigital stored on a personal computer and large server. Information collection, storageand spread is more than ever the convenient, quick and effective. But by the same timeof enjoy the convenience of information in digital and speed, the problem ofinformation security at the same high level.The security of data files is the core of the safety of intranet. Existing internalnetwork security defense methods are generally based at the network boundary security,effective protection of the data file methods include hardware encryption technology,the transparent layer in the drive encryption technology, encryption and decryption filterdriver layer technology and API HOOK transparent encryption technology.This paper presents a design method for a virtual disk on the core layer, andthrough the analysis of AES algorithm, and some APIs of the DDK in Windows NTplatform, the Advanced Encryption Standard algorithm is achieved, So as to achieve themedium-to-disk encryption and application-level real-time monitor. The goal is toinsure data files are stored in the hard disk at the form of encryption text by theautomatic and transparent encryption. Even if the files are stolen, cracking encryptedfiles can also be a major barrier to get the key documents. In this paper first learnWindows driver development framework and the DDK use, to complete virtual disksystem development. That is in a computer system take a period of disk spacedivision,to forma new disk volume label to research mainstream encryption algorithm,especially the study analyzed the AES algorithm the principle and implementation ofprocess. To realize the file encrypt, decrypt. Through the research and analysis AESencryption algorithm, and further discusses and analyzes the AES encryption systemsecurity, by programming language on the PC, successfully achieved in this paper forthe use of the actual file AES encryption decryption. Then through the master of MFCapplication development framework, good skill in the use of the WIN32API functions.Complete the application layer to monitor the file, and finally achieve the change of the development of the virtual disk file for automatic transparent encryption. MFCframework is a very complicated process development framework, with its powerfulclass library, is famous for its development period of time Windows programs andreduce the programmer’s work. This paper using MFC development program the userinterface, simple and clear. for some API when using WIN32, mastered the use ofMSDN help documents. Application real-time encryption system is using MFC libraryand of the combination of the WIN32API realization, skillfully sidesteps the hook,using Windows directly through the existing WIN32API to achieve the applicationlayer file monitoring.